Free plan, no credit card, first error in minutes.
Create a Project for FreeDiscover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Blocksy Companion allows unauthenticated attackers to gain Dokan vendor privileges and automatic login during registration, even if vendor signup is turned off.
A critical vulnerability in Blocksy Companion allows unauthenticated attackers to upload arbitrary files, potentially leading to remote code execution when the premium edition is active with specific extensions.
An arbitrary file upload vulnerability in the Blocksy Companion plugin for WordPress allows authenticated attackers with author-level permissions or higher to upload arbitrary files, potentially leading to remote code execution.
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.